fix(deps): update module github.com/go-git/go-git/v5 to v5.14.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/go-git/go-git/v5	v5.13.2 -> v5.14.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.14.0

Compare Source

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @​pjbgf in https://github.com/go-git/go-git/pull/1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22 -> 1.24.1
golang.org/x/crypto	v0.32.0 -> v0.35.0
golang.org/x/net	v0.34.0 -> v0.35.0
github.com/Microsoft/go-winio	v0.6.1 -> v0.6.2
github.com/cloudflare/circl	v1.3.7 -> v1.6.0
github.com/cyphar/filepath-securejoin	v0.3.6 -> v0.4.1
github.com/golang/groupcache	v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/google/go-cmp	v0.6.0 -> v0.7.0
github.com/skeema/knownhosts	v1.3.0 -> v1.3.1
golang.org/x/sync	v0.10.0 -> v0.11.0
golang.org/x/sys	v0.29.0 -> v0.30.0
golang.org/x/text	v0.21.0 -> v0.22.0

[coveralls]

Pull Request Test Coverage Report for Build 13693747810

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• 85 unchanged lines in 4 files lost coverage.
• Overall coverage decreased (-1.3%) to 31.099%

---

Files with Coverage Reduction	New Missed Lines	%
internal/load/load.go	7	0.0%
internal/runtime/test.go	13	0.0%
internal/load/common.go	21	0.0%
internal/runtime/flex.go	44	0.0%

Totals
Change from base Build 13693726628:	-1.3%
Covered Lines:	1967
Relevant Lines:	6325

---

💛 - Coveralls